Google MFA: Getting Started With Multi-Factor Authentication

What is Multi-Factor Authentication?

Multi-Factor Authentication (MFA), is a security requirement for staff access to many district systems including, but not limited to, Google, Synergy, and the VPN. This additional security layer is required by our cyber security insurance provider because it has been proven effective at preventing certain types of cyber attacks.

When you sign into your online accounts (a process called "authentication") you're proving to the service that you are who you say you are. Traditionally that's been done with a username and a passphrase. MFA provides an extra layer of security beyond just a passphrase, in the form of a physical device (phone, tablet, or USB key), to protect an account by requiring a secondary form of authentication.

With MFA, if a passphrase is compromised there is still an additional layer of protection required (i.e. the physical device) to gain access to an account.

Set up MFA for Google

Set up MFA authentication on your personal mobile device or use a security key. Non-administrative GBSD employees can request a district-provided Security Key from the Service Desk.

Things to know:

Google calls their MFA system “2-Step Verification.”
Docuware users using the Connect to Mail App will need to implement a new connection after Google 2-Step Verification has been set up (Note: Login required to access this article).
Due to the insecure nature of SMS text messages, verification via SMS texts will NOT be supported.

Use a Personal Mobile Device

Using a personal device for MFA is the most convenient option since the device is usually with a person wherever they go.

Use a Security Key

A Security Key is a USB device that plugs into the USB port on your district-provided computer.

You will use this key every time you log into Google.
A personal or district-provided Security Key can be used.